:niggy:

Public Key

npub1d0npefkxtfkcptjdawvwkfu58japhjfaljt4hqtpq2xqn8pt2nwqdjahqw

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsxhesu5mr95mvq4ex7hx8ty72rewsmey7le96ms9ss9rqfns44fhqpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qrrqa04

Publishing to

relay.mostr.pub

Author Public Key

npub1d0npefkxtfkcptjdawvwkfu58japhjfaljt4hqtpq2xqn8pt2nwqdjahqw

Show more details

Last Notes

2024-07-21 09:32:27

her name is niggy
#note1wse…52u4
https://i.poastcdn.org/dbc64e1b3b20c7f18314275eff8ed2960b5547fb07b4ff1019f4efa6940ea20c.jpeg

2024-06-21 05:20:05

- reply

Kaspersky is the only major company that actually investigates and reports on US and five eyes hacking ops, they've burned many over the years. Something media's not mentioning in these articles, but definitely a factor in this ban.
Just last year they burned NSA tooling targeting iphones:
securelist.com/operation-triangulation/109842/

2024-05-14 07:43:54

- reply

thank you friend

2024-05-14 07:33:35

youtube.com/watch?v=3B0kjlac3o4
nightcore time

2024-05-13 08:03:59

- reply

no friend, don't worry
I'm just wondering if hypothetically one were to break in future, what the impact could be :hapyniggy:

2024-05-13 07:28:23

- reply

also if it helps this seems to be a more expensive/advanced one than most. this model has a price well into the 5-figures

2024-05-13 07:23:27

- reply

I can't find any information online about what these are actually used for other than just "measure a surface's profile"

2024-05-13 07:21:10

important question. any scientific oomfies here know what a "profilometer" is used for?
I can see they're very expensive and and read the wikipedia article for what they do, but what are they actually used for in the real world?
like if there was a secured cleanroom lab in a university with one of these, what could it be used for? some type of student work? research? manufacturing? how could their operations be affected if this "profilometer" were to break?
thank you oomfies

2024-04-07 08:35:53

- reply

it is! especially when it needs to interact with C code, which this stuff has to a lot
It has many nice features though, I'm actually liking Rust a lot so far

2024-04-07 08:30:13

- reply

Computer Niggy Exploitation capability development :hapyniggy:
https://i.poastcdn.org/7a0578a544dd2420e129337df5de5f7d2a0b85781ba5a6cc7040eb8222ab5565.png

2024-02-13 05:46:26

- reply

what are they cooking

2024-01-20 17:36:23

- reply

honestly friend it is almost impossible to guarantee preventing that
the asymmetry between attackers/defenders is defenders have to succeed every time, an attacker only need to succeed once, and can just keep trying until they do. that's why "persistent" is in the term "advanced persistent threat"
so the focus in recent years has shifted away from trying to completely prevent attackers gaining access, towards adequately detecting and responding when they do. similar to the "defend forward" doctrine in the public-sector
this is actually pretty effective, if a corpo just has decent basic security practices and monitoring, they can detect and stop basically all common threats
attackers that actually do the huge effort to avoid loud TTPs, develop custom tooling, etc, required to avoid that basic monitoring and detection are actually very rare

2024-01-20 16:54:14

- reply

only started this as a simple tool to emulate an interactive shell, without a pty on target
unix-like systems record a login when a interactive terminal (pty) is opened, but ssh protocol actually allows executing single commands without one. so you can silently run system commands without any logins in system logs
then wanted to add a couple more features, and before I knew it of course every single feature the ssh protocol offers. even had to write a custom SOCKS5 protocol parser...

2024-01-20 16:24:04

created a custom ssh + sftp client
may actually open source this, one of my few tools that can't really be signatured
https://i.poastcdn.org/36936d4470c4b85dffa78d762e729f48cd51d409cfb35d4929a011ea3878b972.png
https://i.poastcdn.org/8cda6bf00ca3cfa7dc457615aebfb0cbdc27bba36fb9b4282a32afadb86c6c40.png

2024-01-14 23:25:58

- reply

nigger followed then immediately blocked me

2023-12-26 05:26:21

- reply

it just looks better because the niggy & riamu, which I didn't draw
actually was very quick and crude. don't have any experience at this stuff, only vector art

2023-12-26 04:08:36

- reply

edited to 4:3, think it looks better and suits the period
https://i.poastcdn.org/14da5128cd32530c1af5c3ebb7e6facb1b98515c7d70d0938af6d64af4dcf15d.png

2023-12-26 03:40:48

- reply

yes friend, except a couple of things like niggys face

2023-12-26 03:32:05

drew something I saw in a dream
https://i.poastcdn.org/badf07c284a02363987faefd4d3b0f2ee733291d5162fe869b3372ff48aa6a87.png

2023-12-25 04:16:10

- reply

niggy

2023-12-22 09:28:41

- reply

could look into doing a BGP attack with this, been a few years since the last good one of those

2023-12-22 09:07:39

- reply

the credentials I first had were students and staff
basically I exploited server on the internet, extracted credentials from that server, and tunneled through it to access other stuff in their internal network, including that SMB share

2023-12-22 09:00:49

- reply

yes an SMB share, it's basically a way to share files from one windows computer to others in a network
they had a share used for system backups, but allowed access to standard privileged users
so I used user credentials I had to log on, download from the share, and get more privileged credentials

2023-12-22 08:55:36

- reply

remotely accessed yes
just basically downloaded a disk image from the share, and extracted creds from it locally

2023-12-22 08:45:35

- reply

yes friend I'll explain. it means they have spent lots of money on "advanced" stuff, while forgetting the basics
EDR is like an antivirus, it monitors computers for suspicious activity, sending alerts to a central dashboard
they have 2 different ones (CS Falcon & MS Defender Endpoint) installed on most systems, unusual and expensive
but they left system backups open for me to freely take, and extract credentials from

2023-12-22 08:32:43

- reply

oomfies, we now officially control and entire /16 ASN
https://i.poastcdn.org/b01b2cbcb7725656f0ba2e3d7332c36ac873da94455cfbee4dfb80b16a85b2c7.png

2023-12-19 11:06:25

- reply

niggers be paying for doubled-up edrs on thousands of systems, while forgetting basic stuff like not leaving esxi backups on public smb shares
many such cases
https://i.poastcdn.org/8e09a629b2d3fdd4ffaa579067f20be4ea0a5d4f87529e88c50ea3da6e76d582.jpg

2023-12-19 10:56:14

- reply

domain admin :niggydab:
'nother w for the NOC :niggy:
https://i.poastcdn.org/2d2ad57315469240d26a541d2fb7257de0dd26a03a1f98c59454598d7c3bc548.png

2023-12-15 07:47:35

- reply

if someone's selling access to something, they're not going to publicly advertise what it's for, quickest way to lose it. there's only one "largest ISP in Asia"

2023-12-15 00:25:43

- reply

my general thoughts on stuff posted on those forums is it shouldn't be taken that seriously, don't know specifically about those "CyberNiggers" though
notice people never actually say what information they got or the value of it, just a generic description of the organization. so they'll say "US Army documents" when it's just a cafeteria menu or whatever
individual hackers or small groups like that are motivated by attention and fame, not actually getting valuable stuff, so that's the most efficient model for them. getting low-hanging fruit under big impressive names, and dumping it straight to the newest breachforums clone, instead of leveraging that initial compromise for greater goals
effective computer hacking takes a huge amount of time, patience, and effort, with long-term campaigns against specific targets. So individuals just aren't good at it, but governments and large financially-motivated groups are
thank you for reading my rant friend

2023-12-06 04:29:02

- reply

one server in California university's DMZ I've kept access to for years, I think since 2019, literally just for tunneling through to browse things blocked by tor
most access I haven't really used for anything, yet, just like having it

2023-12-06 04:24:57

- reply

yes friend, there's actually many of them, just don't poast about most
just this one for showing off a tool I made

2023-12-06 04:18:58

- reply

Computer Niggy Exploitation access to Active Directory :hapyniggy:
https://i.poastcdn.org/2484519f5f822bd90c0189a5889dc00fd1e85044b1742ae7487be436f805cf30.png

2023-12-05 13:41:24

- reply

first field use :hapyniggy:
https://i.poastcdn.org/6321a9802b1cb245856bae99e9c472357550a49b09f6efdbda5c54bf410dbe24.png

2023-12-03 06:51:23

- reply

thank you friend

2023-12-03 06:50:35

- reply

what did they say
https://i.poastcdn.org/41963166893dc78ec28a431598601594f760222269fe67d7594480b2593f91fa.png

2023-12-03 06:46:20

- reply

did consider zig, chose rust instead mostly just because it's more popular, also has some extra nice high-level features like implicit mem management and functional programming stuff

2023-12-03 06:22:15

- reply

even this whore gets one
https://i.poastcdn.org/085e327c6e68641f6ed4736eb7a24fb526a92b86947ad3b395c7e96466453865.jpeg

2023-12-03 06:21:42

thousands of padorus made, yet not a single one of niggy

2023-12-03 06:10:49

- reply

I mostly am friend, main takeaways so far:
For anything low-level or without 1mb+ binaries (what I need), you can't use the standard library
Without the standard library, you can't use nearly any 3rd-party rust libraries, only C libraries
Using C libraries is complicated and code is very ugly
Working it out though, almost got mongoose C library for http client/server working, since you can't use any rust networking libraries without std

2023-12-03 06:00:36

learning rust :hapyniggy:

2023-11-25 12:24:34

- reply

asp.net agent done
https://i.poastcdn.org/c3ae972efd7b68aebe311308b903560e74aa4c51090ab74d6382ab741423ee47.png

2023-11-25 12:02:50

- reply

niggy
https://i.poastcdn.org/35f2bb5b2050d24be0d213d57d41e4d6b255804bfaba697016b0fda98fda3987.jpg

2023-11-25 09:28:30

friends, its officially 11/25. wish her a happy niggy day
project-imas.wiki/Sachiko_Koshimizu
https://i.poastcdn.org/8c8e2c8717c43dfe6c80aeb58d8364089fbf3df428648947a6d080072607945e.jpeg

2023-11-11 23:22:05

https://i.poastcdn.org/07b1b7b80ad31e0194868a159568de13b3ef78485e488da059c59847e19ad691.jpg

2023-10-16 07:31:45

- reply

her name is niggy

2023-10-14 12:15:15

interesting islamic lore I just learned. in the end times, they believe the trees will animate alive calling out locations of jews for muslims to kill
except one specific type of tree, which has gone rogue collaborating with the jews. they believe israel is secretly farming massive plantations of this tree to defend them in the coming apocalypse
en.wikipedia.org/wiki/Gharqad

2023-10-12 16:47:40

- reply

https://i.poastcdn.org/250946258f3bf3113c6aafd1ef0c0b36d36c808f94b890643cd1123fd18c6ce5.png

2023-10-07 07:21:31

- reply

her name is niggy
https://i.poastcdn.org/20ede471d93c2d40cebb4d968278c1a75c2d2e41e707c3c7d999d237ac351e9b.jpg

2023-10-06 13:57:49

- reply

ban evasion is still against twitter rules I think... but @freshniggy only lasted a few months back in 2021, have @bestniggy now

2023-10-06 13:47:32

- reply

curious where you even found that screenshot? wonder if any more funny stuff from my old twitter is archived

2023-10-06 13:42:52

- reply

miss that old @, btw this was in response to me drawing fanart for this guy
twitter.com/ArgyleAchilles/status/1389116663522480132
https://i.poastcdn.org/8b4c78b3a15e3990543da5ba94165911f7a0e948de64a45deae8586005242daf.jpg

2023-10-06 02:02:26

- reply

yes friend I think it's about the irony, not celebrating the murder itself.
it seems the victim supported violent black criminals, yet was killed by a violent black criminal. destroyed by the very thing he promoted.
people have always found that trope humorous, back to the story of midas.

2023-10-04 19:01:39

- reply

her name is friggy
https://i.poastcdn.org/8cfec599cdf135ba6c483c681fcd7468991f5d0383933aa8ae5cec743862629b.png

2023-10-04 18:58:46

- reply

her name is chiggy
https://i.poastcdn.org/f7feceeee72dbfacab7367d6c28ea1a00f28e467f37deff87d69af1cb9d47d46.png

2023-10-04 18:58:19

- reply

her name is tenshiggy
https://i.poastcdn.org/29bab177d8d1fca7eab9215139de13705698fd78d502bdf38d42ffeb4912cebd.png

2023-10-04 18:57:52

- reply

her name is sniggy
https://i.poastcdn.org/8e0245081859cf4ab5a4b708cfe536f69148fffd38286d73545fe4e5824d2547.png

2023-10-04 18:57:24

- reply

her name is niggy

2023-10-03 12:36:09

- reply

iykyk

2023-10-03 12:30:32

- reply

why wouldn't I research my Computer Niggy Exploitation operation?
https://i.poastcdn.org/250946258f3bf3113c6aafd1ef0c0b36d36c808f94b890643cd1123fd18c6ce5.png

2023-10-03 12:12:48

- reply

google

2023-10-03 11:58:21

the word "niggy" is now officially recorded in US federal court documents
https://i.poastcdn.org/28fbc5b3183a5eb3308fc1a3afb9ba87170e5495b5679584c7996eb74d1fc91d.png
https://i.poastcdn.org/6d9e3504b2721bebe78aecb2b9de51b85f734ba5a9209bb20f6ed00f137a7e0a.pdf

2023-10-03 07:46:14

- reply

#:nekodance:
https://i.poastcdn.org/6f89b42b53fc0679c8b3cef1965eaaeb8e550d76845d7c445b7a63a2f4d973bd.gif

2023-10-03 07:40:14

- reply

it isn't neco arc friend, her name is niggy
https://i.poastcdn.org/000a0dd20b6ffbdad60e07d37aff4126c33ce7d49e4ac9207df2fab4e94c9c00.gif

2023-10-02 07:41:04

- reply

you know what to do
https://i.poastcdn.org/250946258f3bf3113c6aafd1ef0c0b36d36c808f94b890643cd1123fd18c6ce5.png

2023-09-29 13:32:53

- reply

https://i.poastcdn.org/89ff671f56a6c35abe70421606451b3e790ba03ce8b0400a8366d6157019f701.png

2023-09-29 12:05:05

I am racist

2023-09-26 11:53:22

- reply

yes friend, I believe the artist hints at it in their (translated) description:
>The first time, I failed to land, so I set up money with everyone in the office and made Sachiko a body that could keep flying all the time.
>Also, you may think that it was a composition you saw somewhere, but don't worry.
archive.is/84A9I

2023-09-26 11:35:47

- reply

her name is niggy
https://i.poastcdn.org/1bd8a911423775e66b296e45beed3c398a2eb25740066fd6f6d016c6a5ff88aa.jpg

2023-09-19 07:38:45

- reply

happy birthday friend
https://i.poastcdn.org/1aba993f943a16f6d12d3f4ce319718ea92e0fb546bda9517041ff87d2c32335.jpeg

2023-09-17 06:28:46

- reply

simplest tool that can do that im aware of is binwalk, should be easy to install if you're on linux. does entropy analysis and can generate a nice graph too

2023-09-17 06:10:59

- reply

got file upload/download working, now need to do asp and javaserver agents
https://i.poastcdn.org/dd4febda1a1512804f66b3770ac9b42bad6bd48982d7cff3a95aaf59462f7c35.png

2023-09-16 21:39:22

- reply

"3rd quarter layoffs" there isn't a meme and it actually what's always used, click rate is several times anything else
just put something about layoffs/redundancies and employees will always open it

2023-09-16 10:46:25

- reply

classical antiquity was far more culturally popular pre-20th century than today. in media of the time like theatre plays, even writing poetry in latin
we need to think about ancient rome more

2023-09-14 04:06:19

squeezing water from the stone that is php4 (released 2000)
https://i.poastcdn.org/2de4407ec2133530d2967da284bdb9033631852dace646bc0d91d7a3a5410e27.png

2023-09-12 20:43:36

- reply

the code bases are massive, 10s of millions of lines + all the 3rd party libraries, and these bugs are tiny and very hard to find. these are the kind of mistakes that cause memory corruption exploits:
indexing an array at 1 instead of 0
freeing an object, then using that object somewhere else
freeing an object twice
these bugs are rarely even found by humans, but automated fuzzing. it’ll find the most obscure complicated edge-cases that cause these conditions, which a human can’t find by reading the code

2023-09-11 03:27:26

- reply

https://i.poastcdn.org/9da29e820ecaff765f66f3a3fd97a1454dd54d4f4d64fc2f51f4b8e17fa242f9.webm

2023-09-11 02:51:41

- reply

thank you friend :niggygift:

2023-09-07 01:43:36

got community note access
https://i.poastcdn.org/875851bdf80f62867f8e014039cd5a8ab8146c18fe9c34276da79930be878fae.png

2023-09-05 04:02:04

- reply

end-of-life internet explorer still has a real market share in 2023 surprisingly, think it's like 5%
the old fad of commercial browser exploit-kits are still kept on life support today literally just by those random boomers still using IE, people make their income off it
malwarebytes.com/blog/threat-intelligence/2023/08/old-exploit-kits-still-kicking-around-in-2023

2023-09-01 22:00:22

- reply

https://i.poastcdn.org/6ce63c7717873d698645f6f1e440b8e4e097912ce34a2e891aafa25292d9b66c.jpg

2023-08-31 21:08:05

- reply

yay :mikuLeek:
https://i.poastcdn.org/4ea6a06852fb522ba6b13b5f9d5b0984c19e784e9631d118d9e2c65d1462f43a.gif

2023-08-31 02:27:22

- reply

her name is niggy
https://i.poastcdn.org/028353249681014c90c9ade2efcb0a80ebec64b169c0ea4f3d6702c59cf29cf6.jpg

2023-08-30 21:28:23

look oomfies im on tv
youtube.com/watch?v=BFIvxu7xwLI

2023-08-30 09:10:36

- reply

no XSS stuff, people worked pretty hard at finding all those vectors in the backend, and the standard Poast frontend (Soapbox) dev is actually competent and has CSP that mitigates that. Soapbox has never had a XSS vulnerability I believe
Even a couple of years ago when I reported exploitable HTML injection (forms + css), there wasn't XSS

2023-08-30 05:16:00

https://i.poastcdn.org/000a0dd20b6ffbdad60e07d37aff4126c33ce7d49e4ac9207df2fab4e94c9c00.gif

2023-08-30 04:28:51

- reply

you're welcome friend
tell him there's nothing to worry about though, all Computer Niggy Exploitation activities are conducted under strict internal regulatory and ethical oversight

2023-08-30 03:52:45

- reply

yes friend universities have basically the most vulnerable networks that exist in my experience
massive networks with huge surface area and a lot of legacy systems
and usually aren't spending a lot on security compared to normal in the corporate/government sector

2023-08-30 03:30:56

- reply

FBI's opened an investigation into this apparently, this turned out a lot more fun than I expected

2023-08-30 03:13:20

- reply

fox9.com/news/university-of-minnesota-data-breach-class-action-lawsuit-filed

2023-08-28 20:25:28

- reply

https://i.poastcdn.org/d351d526ac744f55dbb03d2058e5205c6a12b3ec855226cba02dcb1e5ccd4a98.png

2023-08-28 05:02:54

:alert:

2023-08-25 10:01:10

- reply

degrees aren't super important for most tech work and they're worth less every day, also CCNA is a good cert. just get an interview and show you're smart and motivated
good luck friend, I believe in you :hapyniggy:

2023-08-24 18:43:12

- reply

her name is niggy
https://i.poastcdn.org/1180c9ef2bbc87aebb956acaa638cef9315bd9071d9f6b9bc93f9f98c6fef966.gif
https://i.poastcdn.org/1180c9ef2bbc87aebb956acaa638cef9315bd9071d9f6b9bc93f9f98c6fef966.gif
https://i.poastcdn.org/1180c9ef2bbc87aebb956acaa638cef9315bd9071d9f6b9bc93f9f98c6fef966.gif
https://i.poastcdn.org/1180c9ef2bbc87aebb956acaa638cef9315bd9071d9f6b9bc93f9f98c6fef966.gif

2023-08-24 18:37:01

https://i.poastcdn.org/1180c9ef2bbc87aebb956acaa638cef9315bd9071d9f6b9bc93f9f98c6fef966.gif

2023-08-24 17:45:26

- reply

meme nickname 4chan people created for niggy

2023-08-24 17:43:28

- reply

come faster if you say sachiko

2023-08-24 17:36:12

- reply

2 and a half years first block I've ever got

2023-08-24 10:26:11

- reply

happy birthday friend :niggygift:
https://i.poastcdn.org/d351d526ac744f55dbb03d2058e5205c6a12b3ec855226cba02dcb1e5ccd4a98.png

2023-08-24 05:01:52

- reply